A security hole was discovered in the package mentioned above.
Please update the package in your installation as soon as
possible.

1. Problem Summary

There is a heap-corruption vulnerability existing in slocate. It
can compromise slocate's ability to maintain an index of the entire
file- system as well as its ability to read user-specified
databases.

2. Impact(Based on the BugTraq advisory on securityfocus.com,
id#2004)

Secure Locate maintains an index of the entire filesystem,
including files only visible by root. The slocate binary is setgid
"slocate" so it can read this index. The heap-corruption
vulnerability may com- promise disclosure of these files if
exploited.

When running slocate, users are able to specify a database of
their own as a commandline parameter. A subtle vulnerability exists
in slocate's reading of these user-supplied databases that may
allow a local user to execute arbitrary code with effective gid
slocate.

When reading the contents of the database file, slocate
initially reads a value from the file that is supposed to indicate
the offset in a
malloc()'d buffer at which the data is to be written. If this
number ex- ceeds the size of the allocated buffer, the bytes from
the file will be written to the memory following the buffer, the
malloc structure.

As a result, it is possible for a local user to overwrite
internal malloc memory structures on the heap with arbitrary data.
Attackers can replace a legitimate malloc structure with a
malicious one designed to cause other areas of memory to be
overwritten.

3. Solution

Update the package from our ftp server by running the following
command:

Advertiser Disclosure:
Some of the products that appear on this site are from companies from which QuinStreet receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. QuinStreet does not include all companies or all types of products available in the marketplace.